Open source Windows Event Collector
-
Updated
Jun 15, 2024 - Python
#
windows-logs
Here are 15 public repositories matching this topic...
Qt based application to decode windows log files(.etl and .evtx) to txt files
-
Updated
May 15, 2023 - C++
AI destekli çoklu platform log analiz ve güvenlik aracı - Windows, Linux, macOS için otomatik log toplama ve güvenlik analizi
python windows macos linux open-source log-analysis artificial-intelligence cybersecurity system-monitoring security-automation vulnerability-scanner malware-detection secur ai-security threat-detection siber-guvenlik python-tool linux-logs windows-logs log-analysis-tool
-
Updated
Sep 15, 2025 - Python
The Granted Access Converter is a utility designed to help users understand and interpret the GrantedAccess values found in Sysmon Event ID 10 logs.
-
Updated
Mar 31, 2023 - HTML
Windows disk cleanup PowerShell script.
windows script powershell disk-cleanup temp-files log-files windows-logs system-cleanup cache-cleanup admin-script
-
Updated
May 16, 2023 - PowerShell
PowerShell script to efficiently search and analyze Windows Event Logs.
-
Updated
Aug 10, 2024 - PowerShell
Hands-on detection engineering portfolio focused on behavior-based threat detection, EQL, and real-world attack analysis
log-analysis incident-response dfir threat-hunting elastic malware-analysis blue-team eql mitre-attack threat-detection detection-engineering threat-research elastic-security windows-logs cybersecurity-portfolio behavior-based-detection detection-validation
-
Updated
Apr 29, 2026 - Python
Windows Security Monitoring Dashboard in Splunk – detect failed logons, track account lockouts, and visualize authentication trends.
-
Updated
Aug 23, 2025
A lightweight Mini-SIEM and Centralized Log Management system for Windows. Features remote Agent collection, Sysmon integration, and a Rules Engine for threat detection. Built with JavaFX & Javalin.
-
Updated
Jan 31, 2026 - Java
A practical cybersecurity project focused on building and configuring a SIEM environment using Splunk/ELK Stack to collect, monitor, and analyze Windows event and Sysmon logs. Includes real-world attack simulations, threat detection dashboards, and an incident response report.
log-analysis splunk incident-response cybersecurity sysmon siem soc elk-stack log-monitoring blue-team threat-detection windows-logs cyb-gufran
-
Updated
Oct 22, 2025
SOC project simulating and investigating brute force login attacks using Splunk and Windows authentication logs.
-
Updated
Apr 3, 2026
Custom CrowdSec parser test to detect Windows brute-force login attempts (Issue #1235)
-
Updated
Apr 20, 2025
SOC-level Windows Security Log Analysis using ELK Stack (Filebeat, Elasticsearch, Kibana) and Python on LANL dataset. Includes log ingestion, chunk processing, forensic analysis, and threat detection.
-
Updated
Feb 13, 2026 - Jupyter Notebook
Local Validation Toolkit is a Python-based toolkit for Windows log processing and local LLM analysis. It enables AI-assisted workflows using a local model (via LM Studio), including log sanitization for privacy, structured prompt design, and system log analysis with guardrails for adversarial and out-of-scope user inputs.
-
Updated
May 1, 2026 - Python
A CLI program that fetches logs from Windows Event Viewer. Summarizes them via OpenAI GPT and exports in various file types
-
Updated
Jun 27, 2025 - Python
Improve this page
Add a description, image, and links to the windows-logs topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the windows-logs topic, visit your repo's landing page and select "manage topics."